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Abstract — Recent research developments show that the concept 
of bidirectional relaying significantly improves the performance in 
wireless networks. This applies to three-node networks, where a 
half-duplex relay node establishes a bidirectional communication 
between two other nodes using a decode-and-forward protocol. In 
this work we consider the scenario when in the broadcast phase 
the relay transmits additional confidential information to one 
node, which should be kept as secret as possible from the other, 
non-intended node. This is the bidirectional broadcast channel 
with confidential messages for which we derive the capacity- 
equivocation region and the secrecy capacity region. The latter 
characterizes the communication scenario with perfect secrecy, 
where the confidential message is completely hidden from the 
non-legitimated node. 

I. Introduction 

The use of relays is currently becoming more and more 
attractive since they have the potential to significantly improve 
the performance and coverage of wireless networks. Relay 
communication suffers from the fact that orthogonal resources 
are needed for transmission and reception. The inherent loss 
in spectral efficiency can be reduced if bidirectional commu- 
nication is considered [1,2]. 

Cellular system operators offer for several users different 
services simultaneously where some of them are subject to 
secrecy constraints. Due to the nature of the wireless medium, 
a transmitted signal is received by the intended user but can 
also be overheard by non-intended users. Consequently, a 
system design that enables secure communication becomes an 
important issue especially for confidential information, where 
non-legitimated receivers should be kept ignorant of it. 

In his seminal work [3] Wyner characterized the secure 
communication problem for a single source-destination link 
with an eavesdropper, the so-called wiretap channel. In [4] 
Csiszar and Korner generalized this model and studied the 
broadcast channel with confidential messages. Recently, the 
secure communication problem gained a lot of attention; for 
a current survey we refer, for example, to [5]. The multiple 
access channel with confidential messages is analyzed in [6], 
while [7] discusses the interference and broadcast channel. Se- 
cure communication in relay broadcast channels is addressed 
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(a) MAC phase 



(b) BBC phase 



Fig. 1 . Decode-and-forward bidirectional relaying. In the initial MAC phase, 
nodes 1 and 2 transmit their messages m\ and m2 with rates R2 and R\ to 
the relay node. Then, in the BBC phase, the relay forwards the messages mi 
and m2 and adds a confidential message rric for node 1 with rate Rc to the 
communication which should be kept as secret as possible from node 2. 



in [8] and in two-way wiretap channels in [9]. 

We consider bidirectional relaying in a three-node network, 
where a relay node establishes a bidirectional communication 
between two nodes using a two-phase decode-and-forward 
protocol as shown in Figure 1. Here, our main concern is 
on enabling an additional confidential communication within 
such a network. This differs from the wiretap scenario where 
the bidirectional communication itself should be secure from 
eavesdroppers outside of the wireless network as, for example, 
studied from a signal processing point of view in [10, 11]. 

In this work, we concentrate on the broadcast phase, where 
the relay has successfully decoded the two messages the nodes 
have sent in the previous multiple access (MAC) phase. The 
task of the relay is then to transmit both messages and an 
additional confidential message to one node, which should be 
kept as secret as possible from the other, non-legitimated node. 
For decoding, the receiving nodes can exploit the messages 
they have sent in the previous phase as side information so 
that this channel differs from the classical broadcast channel 
with confidential messages and is therefore called bidirectional 
broadcast channel (BBC) with confidential messages. 

For the BBC without confidential messages in [12, 13] it 
is shown that capacity is achieved by a single data stream, 
which combines both messages based on the network coding 
idea. Here, we address the problem of realizing additional 
confidential communication within a network that exploits 
principles from network coding; hence, the optimal processing 
is by no means self-evident.' 



Notation: Discrete random variables are denoted non-italic capital letters 
and their realizations and ranges by lower case letters and script letters, 
respectively; 'P{-) denotes the set of all probability distributions and A^J^^ [■) 
the set of (weakly) typical sequences, cf. for example [14]. 



II. Bidirectional Broadcast Channel with 
Confidential Messages 

Let X and 3^,;, i = 1, 2, be finite input and output sets. Then 
for input and output sequences x" G X"^ and e y^, i = 
1, 2, of length n, the discrete memoryless broadcast channel is 
given by M^®"(yl', ya"^") := I{l=iW{yi^u.V2,k\xk). Since 
we do not allow any cooperation between the receiving nodes, 
it is sufficient to consider the marginal transition probabilities 
_ Yll^^ W,{y,^u\xk), » = 1, 2, only. 

In this work we consider the standard model with a block 
code of arbitrary but fixed length n. Let J\Ai := {1, 
be the set of individual messages of node i, i = 1,2, which is 
also known at the relay node. Further, A4c {1, ...,Mi"''} 
is the set of confidential messages of the relay node. We use 
the abbreviation M := Aic x Mi x M2- 

For the bidirectional broadcast (BBC) phase we assume that 
the relay has successfully decoded the individual messages 
TOi € Ail from node 1 and 7712 £ A42 from node 2 that it 
received in the previous multiple access phase (MAC) phase. 
Then the relay transmits both individual messages and an 
additional confidential message ttIc S A^c to node 1, which 
should be kept as secret as possible from node 2. 

Definition 1: An (n, M^' ,M[''\M^''^)-code for the BBC 
with confidential messages consists of one (stochastic) encoder 
at the relay node 

/ : X Xi X 7W2 ^ A-" 

and decoders at nodes 1 and 2 

51 x-^i ^><c xM2U{0}, 
<72 -.y-^ XX2 ^XiU{0}, 

where the element in the definition of the decoders plays the 
role of an erasure symbol and is included for convenience. 

Since randomization may increase secrecy [4,5], we allow 
the encoder / to be stochastic. This means it is specified by 
conditional probabilities /(.T"|m) with 'Ylix^tzx" f{x'"'\ra) = 

1 for each m = (mc, mi, TO2) G M.. Here, /(a;"|TO) is the 
probability that the message m G is encoded as a;" G A"". 

A code is measured by two performance criteria. First, all 
transmitted messages have to be successfully decoded, i.e., 
we want the average probability of a decoding error to be 
small. In more detail, when the relay has sent the message 
m = (?7ic, mi, 771,2), and nodes 1 and 2 have received y" and 
2/2 > the decoder at node 1 is in error if (71(2/1 , m-i) 7^ (m^, m2). 
Accordingly, the decoder at node 2 is in error if 52(2/2 7 ™2) 7^ 
mi. Then, the average probability of error at node i is given by 
•= ^ Z^meA^ « = 1.2, where Ai(m) denotes 
the probability that node 1 decodes (mc,m2) incorrectly if 
m = (mc,mi,m2) has been sent, and A2(m) the probability 
that node 2 decodes mi incorrectly. 

The second criterion is security. Similarly as in [3,4] we 
characterize the secrecy level of the confidential message 
rric G A^c at node 2 by the concept of equivocation. The 
equivocation i7 (McjYj , M2) describes the uncertainty of node 

2 about the confidential message Mc having its own message 



M2 and the received sequence Y2 as side information avail- 
able. Thus, the higher the equivocation, the more ignorant is 
node 2 about the confidential message. 

Definition 2: A rate-equivocation tuple {Rc, Re, Ri, R2) G 
R;^ is said to be achievable for the BBC with confidential 
messages if for any 5 > there is an n{S) G N and a sequence 
of (n, Mi"\ m}"\ M2^"^)-codes such that for all n > n{6) we 

have > R^-S, '-2^ > R,-S, '-^^^ > R2~6, 

and 

^HiMe\Y^,M2)>Re-S (1) 

while /^^"■'j/^j"^ — !> as n — !> cxD. The set of all achievable 
rate-equivocation tuples is the capacity-equivocation region of 
the BBC with confidential messages and is denoted by Cbbc- 

If there is no additional confidential message for the relay 
to transmit, we have the classical BBC for which the capacity- 
achieving coding strategies are known [12, 13]. 

Theorem 1 ([12,13]): The capacity region of the BBC is 
the set of all rate pairs (i?i, R2) G M."^ satisfying 

i?i </(X;Yi|Q), i?2 </(X;Y2|Q) 

for random variables (Q, X, Yi , Y2) G Qx X xyi x 3^2 and 
joint probability distribution PQ{q)Px\Q{x\q)W{yi,y2\x). 
The cardinality of the range of Q can be bounded by | Q| < 2. 

Now, we focus our attention on the broadcast scenario with a 
confidential message and present the main result of this work. 

Theorem 2: The capacity-equivocation region Cbbc of the 
BBC with confidential messages is a closed convex set of those 
rate-equivocation tuples {Rc, Re, Ri, R2) G satisfying 

0<Re< Re, 

i?e </(V;Yi|U)-/(V;Y2|U), 
i?c + i?, </(V;Yi|U) + /(U;Y,), t = 1,2, 

R^<I{V■,Y^), 

for random variables (U, V,X, Yi, Y2) G U x V x 
X X yi X y2 and joint probability distribution 
Pu{u)Py\-u{v\u)Px\v{x\v)W{yi,y2\x). Moreover, the 
cardinalities of the ranges of U and V can be bounded by 

\U\<\X\+3, \V\<\Xf + 4\X\+3. 

Remark 1: While for the BBC without confidential mes- 
sages the auxiliary random variable Q only enables a time- 
sharing operation and carries no information, cf. Theorem 1, 
for the BBC with confidential messages we will see that the 
auxiliary random variable U carries the bidirectional informa- 
tion and V reaUzes an additional randomization. 

From Theorem 2 follows immediately the secrecy capacity 
region C§gQ of the BBC with confidential messages which 
is the set of rate triples (i?c, i?i, i?2) G M'^ such that 
(Re, Re, i?i, i?2) G Cbbc- 

Corollary 1: The secrecy capacity region C^^q of the BBC 
with confidential messages is the set of all rate triples 
{Re,Ri,R2) G satisfying 

i?c </(V;Yi|U)-/(V;Y2|U), 
i?^</(U;Y,), i = l,2. 



for random variables (U, V,X, Yi, Y2) e U x V x 
X X yi X y2 and joint probability distribution 
Pviu)Py\viv\u)Px\vix\v)W{yuy2\x). ■ 
The capacity-equivocation region in Theorem 2 describes 
the scenario where the confidential message is transmitted with 
rate Rc at a certain secrecy level R^. Thereby, Re can be 
interpreted as the amount of information of the confidential 
message that can be kept secret from the non-legitimated 
node. Therefore, Theorem 2 includes the case where the 
non-legitimated node has some partial knowledge about the 
confidential information, namely if Rc > Re- The secrecy 
capacity region in Corollary 1 characterizes the scenario with 
perfect secrecy which is, of course, the practically more 
relevant case. Since Rc = Re, the confidential message can 
be kept completely hidden from the non-legitimated node. 

III. Secrecy- Achieving Coding Strategy 

In this section, we present a coding strategy that achieves 
the desired rates with the required secrecy level and therewith 
prove the achievability part of the corresponding Theorem 2. 

A. Codebook Design 

A crucial part is the following Lemma 1 which ensures 
the existence of a suitable codebook with a specific structure 
consisting of two layers. 

The first layer corresponds to a codebook suitable for the 
BBC with common messages [15] which means that this 
set of codewords enables the relay to transmit (bidirectional) 
individual messages rrig £ -^2 ™d ™i ^ -^i '^o nodes 1 and 
2 as well as a common (multicast) message tiiq £ A^q to both 
nodes. 

Then, for each codeword there is a sub-codebook with a 
product structure similarly as in [4] for the classical broadcast 
channel with confidential messages. The legitimate receiver 
for the confidential message, i.e., node 1, can decode each 
codeword regardless to which column and row index it cor- 
responds. But the main idea behind such a codebook design 
is that the non-legitimated receiver, i.e., node 2, decodes the 
column index of the transmitted codeword with the maximum 
rate its channel provides, and therefore is not able to decode 
the remaining row index [5]. 

Lemma 1: For any (5 > let U ^> X ^> Y1Y2 be a Markov 
chain of random variables and /(X; Yi|U) > /(X; Y2IU). 

i) There exists a set of codewords G W", m! — 

{mQ,m[,m'2) £ M'q x M[ x M'2 =: M' , with 

i(log|K|+log|X^|) >/(U;Yi)-5, (2a) 

i(log|K|+log|M'i|) >/(U;Y2)-<5, (2b) 

such that 

^ E (3a) 



\M'\ 
1 

W\ 



m'eM' 



(") 



(3b) 



m'eM' 

and e(") ^ as n — > 00. Thereby, A, 
the probability that node 1 decodes (toq,TO2) G A^o x A^2 



denotes 



incorrectly if m[ £ A4'i is given. The error event Amj^.m'jm^ 
for node 2 is defined accordingly. 

For each u"^, G Z//" there exists a set of (sub-)codewords 

x]irn' £ X"", j e J, I e C, m' eM\ with 

ilogUI >/(X;Y2|U)-(5, (4a) 
i log \£\ > /(X; Yi |U) - /(X; Y2 |U) - S, (4b) 



such that 



^^EE E W<^^"^ (5a) 

Wee E w<^'"^ (5b) 



\jm\M 



jej lec m'eM' 



and e(") ^ as n 00. Here, Xjj\m' is the probability that 
node 1 decodes j ^ J or I £ L incorrectly if m' G AA' is 
known. Similarly, Aj|; ,„/ is the probability that node 2 decodes 
i ^ J incorrectly if m' G A^' and Z G £ are given. 

Sketch of Proof: Since the proof is based on the classical 
broadcast channel with confidential messages [4] and the BBC 
with common messages [15] we only sketch the main ideas. 

For the first layer we generate |A^'| codewords u^, G 
according to the distribution Pu"('u") = 11^=1 ^u(ufc) and 
use (weakly) typical sets yle"''(U, Y^), i = 1,2, for decoding 
at the receivers. Then, using random coding arguments, for 
the BBC with common messages we know from [15] that (3) 
is satisfied if (2) is fulfilled proving the first part. 

To prove the second assertion, for each uj^, G 
we generate |i7||>C| codewords x''^i^, G X"' according to 
Px"|U"(a:^"|w") = YYk=iP^\v{xk\uk) and use typical sets 
A^"'(U,X,Yi), ? = 1,2, for decoding at the receivers. We 
note that the structure of the sub-codewords is exactly the 
same as for the classical broadcast channel with confidential 
messages [4,5], where the latter assumes the average error cri- 
terion and uses random coding arguments as we do. Following 
the proof it is easy to show that (5) is satisfied if (4) is fulfilled 
proving the second part. ■ 

B. Achievable Rate-Equivocation Region 

Next, we use the codebook from Lemma 1 to construct 
suitable encoder and decoders for the BBC with confidential 
messages. 

Lemma 2: Let U X ^ Y1Y2 and /(X;Yi|U) > 
/(X;Y2|U). Using the codebook from Lemma 1 all rate- 
equivocation tuples {Rc, Re, Ri, R2) <= IR+ satisfying 

0<Rc = /(X; Yi|U) - /(X; Y2IU) < Re, (6a) 
+ </(X;Yi|U)+/(U;Y,), i = l,2, (6b) 
R^<I{V■,Y^), i = l,2, (6c) 

are achievable for the BBC with confidential messages. 

Proof: For given rate-equivocation tuple 

{Re, Re, Ri, R2) £ IKI satisfying (6a)-(6c) we have to 



/(X;Yi|U) 



/(P;Yi) 



/(X;Yi[U) 



/(U;Yo)| /(X;Y2|U) 



M[M:, M'„ J C 

" Rc > /(X;Yi|U) 

Fig. 2. The two bai's visualize the available resources of both links. Each one 
is split up into two parts: one designated for the bidirectional communication 
(gray) and one for the confidential message (white). Since Rc > /(X; Yi\U), 
some resources of the bidirectional communication have to be spent for the 
confidential message as well (realized by a common message). 



/(U;Y2) J(X;Y2|U) 



M[M'2 J ' C 

" i?, < /(X;Yi|U) " 

Fig. 3. Since Rc < /(X; Yi | U), there are more resources for the confidential 
message available than needed. This allows the relay to enable a stochastic 
coding strategy which exploits all the available resources by introducing a 
mapping from J to JC. 



construct message sets, encoders, and decoders with 

^\og\Mc\>Rc-S, (7a) 

^log\M2\>Ri-5, (7b) 

iloglMil >i?2-<5, (7c) 
and further, cf. also (1), 

ii/(M,|Y^,M2) > /(X;Yi|U) -/(X;Y2|U) - S. (8) 

The following construction is mainly based on the one for 
the classical broadcast channel with confidential messages 
[4]. Thereby, we have to distinguish between two cases as 
visualized in Figures 2 and 3. 

If Rc > /(X;Yi|U), cf. Figure 2, we construct the set of 
confidential messages as 

Mc-.^JxCxM'q 

where J' and C are chosen as in Lemma 1 and is an 
arbitrary set of common messages such that (7a) is satisfied. 
The sets Mi = M'l and M2 ~ M2 are arbitrary such that 
(7b)-(7c) hold. Finally, we define the deterministic encoder / 
that maps the confidential message {j^l^m'o) G M.^ and the 
individual messages e Mi, i ~ 1,2, into the codeword 
^]im' ^ m' = (mQ, m[,m'2) and m- = nii, i = 1,2. 

Remark 2: Since Rc > /(X;Yi|U), a part of the confi- 
dential message must be transmitted as a common message. 
It is not possible to simply "add" the remaining part to the 
individual message for node 1, since this would require that 
this part of the confidential message is already available a 
priori as side information at node 2. 

If Rc < /(X;Yi|U), cf. Figure 3, we set Mc := IC x C 
where K, is an arbitrary set such that (7a) holds. Further, we 
define a mapping h : J ^ K, that partitions J into subsets of 
"nearly equal size" [4], which means 

|/i-i(fc)| < 2\h-^{k')\, for all k, k' e /C. 

Moreover, since Rc < /(X;Yi|U), there is no need for 
a set of common messages so that Mq = 0. The sets 
Ml = M'l and M2 = M'2 are arbitrary such that (7b)-(7c) 
hold. Finally, we define the stochastic encoder / that maps the 
confidential message {k, I) G Mc and the individual messages 
rrii G Mi, i = 1,2, into the codeword G A"" with 

m' ~ (0, m']^, 7712), where j is uniformly drawn from the set 
h^^{k) C J and to- = TOj, z 1, 2. 



Remark 3: This time, the set J is not needed in total for the 
confidential message. However, to force the non-legitimated 
receiver, i.e., node 2, to decode at its maximum rate, we define 
a stochastic encoder that spreads the confidential messages 
over the whole set J. 

Up to now we defined message sets and the encoder In both 
cases the decoders are immediately determined by Lemma I . 

To complete the proof it remains to show that the secrecy 
level at node 2 fulfills (8). Proceeding exactly as in [4] we 
define the random variable X" with codewords x",^, G X"^ 

Jim 

as realizations and M' = (Mg, M'j^, Mj) as the third coordinate 
of the realization of X". Then get for the equivocation 

H{Mc\Y'i,M2) > i?(X"|M') + i?(Y^'|X") 

-i/(X"|Mc,M',Y^')-i7(Y^'|M'). ^'^^ 

Next, we bound all terms in (9) separately. We start with the 
first term and observe for given M' = to' that X" has |i7||£ 
possible values. Since X" is independently and uniformly 
distributed, we have iJ(X"|M') = log \J\ + log \C\. With the 
definition of J and C, cf. (4), we obtain 

iiJ(X"iM') ^/(X;Yi|U). (10) 

For the second term in (9) we have 

iiJ(Y2"|X")^i/(Y2|X) (11) 

as n — 00 by the weak law of large numbers. If 
Rc > /(X;Yi|U), the third term in (9) vanishes. If 
Rc < /(X;Yi|U), we define ^{k,l,m',y^) := cc^;,„, if 
«„a:7,„,,2/2") G ^("^(U, X, Y2), h{j) = k, and arbitral 
otherwise. Then we have P{X" 7^ (^(M^, M', Y^)} < e(") 
and therefore, by Fano's lemma, cf. also [4,5], 

iF(X"|M„M',Y^) ^0 (12) 

as 71 — !> 00. For the last term in (9) we define 1)2 ■— 2/2 if 
(u"^, ,2/2) G ^e"''(U, Y2) and arbitrary otherwise so that 

H{Y^\M') < F(Y^|Y^) +i?(Y^|M'). 

For the first term we have P{Y^ ^ Y^} < e(") by Fano's 
lemma, cf. [4,5], so that it is negligible. Moreover, following 
[4, 5] it is easy to show that for the second term we have 

ii?(Y^'|M')^i/(Y2|U) (13) 

which follows from the definition of the decoding sets 
Ae"^(U,Y2) and the fact that the codewords are uniformly 
distributed. 



Finally, by substituting (10)-(13) into (9) we obtain (8) 
which establishes the desired secrecy level at node 2 and 
therewith proves the lemma. ■ 

C. Randomization and Convexity 

Here, we complete the proof of achievability of Theorem 2. 
Since the argumentation is the same as for the classical 
broadcast channel with confidential messages [4], we only 
sketch the main ideas. 

To obtain the whole region of Theorem 2, we proceed 
exactly as in [4] and introduce an auxiliary channel that 
enables an additional randomization. 

Lemma 3: Let U V ^ X — > Y1Y2 and 

/(V;Yi|U) > /(V;Y2|U). Then all rate-equivocation tuples 



i?e, i?2) e M| satisfying 

0<i?e </(V;Yi|U)-/(V;Y2|U) <i?c, (14a) 

i?c + i?^ </(V;Yi|U) + /(U;Y,), « = 1,2, (14b) 

i?. </(U,Y,), i = l,2, (14c) 



are achievable for the BBC with confidential messages. The 
corresponding rate region is denoted by TZ. 

Sketch of Proof: The prefixing realized by the random 
variable V is exactly the same as in [4, Lemma 4]. 

Moreover, it is obvious that if the rate-equivocation tuple 
{Rc, Re, Ri, R2) is achievable, than each rate-equivocation 
tuple {Rc, R'^, Ri, R2) with < i?^ < i?e is also achievable. 
Consequently, we can further replace the equality in (6a) by 
an inequality in (14a). ■ 

Lemma 4: The rate region TZ is convex. 

Sketch of Proof: Exactly as in [4, Lemma 5] it is easy 
to show that any linear combination of two rate tuples in TZ 
is contained in TZ which proves the convexity. ■ 

It remains to show that TZ describes the same rate region as 
the one specified by Theorem 2. 

Lemma 5: The rate region TZ equals the capacity region 
Cbbc of the BBC with confidential messages. 

Proof: It is obvious that TZ C Cbbc holds. To show the 
reversed inclusion, i.e., Cbbc ^ TZ, let {Rc, Re, Ri, R2) S 
Cbbc be any rate-equivocation tuple. For this, we construct as 
in [4] the maximal achievable confidential and equivocation 
rates that are possible for given individual rates i?i and R2 as 

i?: :=/(V;Yi|U) +min{/(U;Yi)-i?i,/(U;Y2)-i?2}, 
R*c :=/(V;Yi|U) -/(V;Y2|U). 

Then we have Re < R*, RI < Rc < R*, and therewith 
also (i?*, i?*, i?2) e TZ. Now, from the definition of 
TZ follows that the rate-equivocation tuples {R*, i?*, Ri, R2), 
{R*c,0,Ri,R2), and (0, 0, i?2) belong to TZ as well. Fi- 
nally, from the convexity of TZ, cf. Lemma 4, follows that 
{Rc, Re, Ri, R2) G TZ which proves the lemma. ■ 
To complete the proof of achievability it remains to bound 
the cardinalities of the ranges of U and V. Since the bounds 
of the cardinalities depend only the structure of the random 
variables, the result follows immediately from [4, Appendix] 
where the same bounds are established for the classical broad- 
cast channel with confidential messages. 



D. Weak Converse 

Already the coding strategy indicates that, basically, ideas 
from the BBC [12, 15] and from the classical broadcast chan- 
nel with confidential messages [4] are exploited. Based on this 
observation it is straightforward to establish the weak converse 
for the BBC with confidential messages by extending the 
converse of the classical broadcast channel with confidential 
messages [4] using standard arguments for the BBC [12, 15]. 

IV. Discussion 

In this work, our focus was on privacy in bidirectional relay 
networks, where additionally to the two bidirectional messages 
the relay node transmits a confidential message to one of 
the nodes, which should be kept as secret as possible from 
the other, non-legitimated node. For this scenario we charac- 
terized the corresponding capacity-equivocation and secrecy 
capacity regions in detail. This scenario is completely different 
from the bidirectional broadcast wiretap channel, where the 
bidirectional communication itself should be kept secret from 
eavesdroppers outside of the bidirectional relay network [10, 
11]. This is an interesting and important topic for itself. 

References 

[1] B. Rankov and A. Wittneben, "Spectral Efficient Protocols for Half- 
Duplex Fading Relay Channels," IEEE J. Set Areas Commun., vol. 25, 
no. 2, pp. 379-389, Feb. 2007. 

[2] R Larsson, N. Johansson, and K.-E. Sunell, "Coded Bi-directional 
Relaying," in Proc. 5th Scandinavian Worksliop on Ad Hoc Networks, 
Stockholm, Sweden, May 2005, pp. 851-855. 

[3] A. D. Wyner, "The Wire-Tap Channel," Bell Syst. Tech. J., vol. 54, pp. 
1355-1387, Oct. 1975. 

[4] I. Csiszar and J. Korner, "Broadcast Channels with Confidential Mes- 
sages," IEEE Trans. Inf. Theory, vol. 24, no. 3, pp. 339-348, May 1978. 

[5] Y. Liang, H. V. Poor, and S. S. (Shitz), "Information Theoretic Security," 
Foundations and Trends in Communications and Information Theory, 
vol. 5, no. 4-5, p. 355580, 2009. 

[6] Y. Liang and H. V. Poor, "Multiple-Access Channels With Confidential 
Messages," IEEE Trans. Inf. Theory, vol. 54, no. 3, pp. 976-1002, Mar. 
2008. 

[7] R. Liu, 1. Marie, P. Spasojevic, and R. D. Yates, "Discrete Memory- 
less Interference and Broadcast Channels With Confidential Messages: 
Secrecy Rate Regions," IEEE Trans. Inf. Theory', vol. 54, no. 6, pp. 
2493-2507, Jun. 2008. 
[8] E. Ekrem and S. Ulukus, "Secrecy in Cooperative Relay Broadcast 
Channels," in Proc. IEEE Int. Syinp. Inf. Theory, Toronto, Canada, Jul. 
2008, pp. 2217-2221. 
[9] X. He and A. Yener, "A New Outer Bound for the Secrecy Capacity 
Region of the Gaussian Two-Way Wiretap Channel," in Proc. IEEE Int. 
Conf. Commun., Cape Town, South Africa, May 2010, pp. 1-5. 

[10] S. Al-Sayed and A. Sezgin, "Secrecy in Gaussian MIMO Bidirectional 
Broadcast Wiretap Channels: Transmit Strategies," in Proc. Asilomar 
Conf. Signals, Systems, Computers, Pacific Grove, CA, USA, Nov. 2010. 

[11] A. Mukherjee and A. L. Swindlehurst, "Securing Multi-Antenna Two- 
Way Relay Channels With Analog Network Coding Against Eavesdrop- 
pers," in Proc. IEEE Signal Process. Adv. Wireless Commun., Marrakech, 
Morocco, Jun. 2010, pp. 1-5. 

[12] T. J. Oechtering, C. Schnurr, I. Bjelakovic, and H. Boche, "Broadcast 
Capacity Region of Two-Phase Bidirectional Relaying," IEEE Trans. Inf. 
Theory, vol. 54, no. 1, pp. 454^58, Jan. 2008. 

[13] S. J. Kim, P. Mitran, and V. Tarokh, "Perfomiance Bounds for Bidirec- 
tional Coded Cooperation Protocols," IEEE Trans. Inf. Theoiy, vol. 54, 
no. 11, pp. 5235-5241, Nov. 2008. 

[14] T. M. Cover and J. A. Thomas, Elements of Information Theory, 2nd ed. 
Wiley & Sons, 2006. 

[15] R. E Wyrembelski, T. J. Oechtering, and H. Boche, "MIMO Bidi- 
rectional Broadcast Channels with Common Message," in Proc. IEEE 
Global Commun. Conf., Miami, FL, USA, Dec. 2010, pp. 1-5. 



